Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due to default file permissions.Check this weekEPSS 12.00%Aug 4, 2025
- Low2.8Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.Check this weekEPSS 14.00%Aug 1, 2025
- High7.5A stack-based buffer overflow vulnerability exists in Synactis PDF In-The-Box ActiveX control (PDF_IN_1.ocx), specifically the ConnectToSynactis method.Check if you run itEPSS 1.69%Aug 1, 2025
- High8.6An authenticated OS command injection vulnerability exists in various Linksys router models (tested on WRT160Nv2) running firmware version v2.0.03 via the apply.cgi endpoint.Check if you run itEPSS 4.32%Aug 1, 2025
- High7.3Pearcleaner is a free, source-available and fair-code licensed mac app cleaner.Check this weekEPSS 18.00%Aug 1, 2025
- High7.4IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, 9.0.0.1, and 9.5.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.Check if you run itEPSS 0.32%Aug 1, 2025
- Critical9.1A privileged Vault operator within the root namespace with write permission to {{sys/audit}} may obtain code execution on the underlying host if a plugin directory is set in Vault’Check this weekEPSS 91.00%Aug 1, 2025
- High7.2A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s token privileges to Vault’s root policy.Check this weekEPSS 51.00%Aug 1, 2025
- UnknownArbitrary Code Execution (ACE) VulnerabilityOpen the advisoryJul 31, 2025
- Critical10.0Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.10%Jul 31, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be chCheck this weekEPSS 18.00%Jul 30, 2025
- High8.6The go command may execute unexpected commands when operating in untrusted VCS repositories.Check this weekEPSS 44.00%Jul 29, 2025
- Medium6.9Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.Check if you run itEPSS 8.00%Jul 29, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in crypt_message when using async crypto The CVE-2024-50047 fix removed asynchroCheck this weekEPSS 72.00%Jul 28, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: tls: always refresh the queue when reading sock After recent changes in net-next TCP compacts skbs much more aggCheck this weekEPSS 44.00%Jul 28, 2025
- Low2.9The curve25519-dalek crate before 4.1.3 for Rust has a constant-time operation on elliptic curve scalars that is removed by LLVM.Check if you run itEPSS 0.17%Jul 27, 2025
- Low2.9The sequoia-openpgp crate 1.13.0 before 1.21.0 for Rust allows an infinite loop of "Reading a cert: Invalid operation: Not a Key packet" messages for RawCertParser operations thatCheck if you run itEPSS 0.40%Jul 27, 2025
- High8.7skops is a Python library which helps users share and ship their scikit-learn based models.Check this weekEPSS 15.00%Jul 26, 2025
- High8.3HAX CMS allows you to manage your microsite universe with PHP or NodeJs backends.Check this weekEPSS 53.00%Jul 26, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: netlink: Fix wraparounds of sk->sk_rmem_alloc.Check this weekEPSS 19.00%Jul 25, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released while the GEM buffer obCheck if you run itEPSS 0.18%Jul 25, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: mtk-sd: Prevent memory corruption from DMA map failure If msdc_prepare_data() fails to map the DMA region, the rCheck if you run itEPSS 0.19%Jul 25, 2025
- Critical9.8The WP Database Backup plugin for WordPress is vulnerable to OS Command Injection in versions before 5.2 via the mysqldump function.Check this weekEPSS 21.76%Jul 25, 2025
- Critical9.4RomM (ROM Manager) allows users to scan, enrich, browse and play their game collections with a clean and responsive interface.Check this weekEPSS 73.00%Jul 21, 2025
- Medium5.9Incorrect authentication vulnerability in ParkingDoor.Check this weekEPSS 21.00%Jul 21, 2025